Scenario: Cyber Attack on SolveTech Inc.
Background:
SolveTech Inc. is a medium-sized software development company specializing in cloud-based applications for various industries. They have a team of 150 employees working across multiple locations. Their systems store sensitive client data and proprietary software code.
Disaster/Disruption:
A sophisticated ransomware attack targeted SolveTech’s main servers, encrypting critical databases, including client information, software codes, and operational data. The attack led to a complete system shutdown, affecting all ongoing projects and rendering the company’s IT infrastructure inaccessible.
Based on the above scenario, please complete the following BASED ON THE MATERIAL COVERED IN THIS CLASS – no points for alternative plan steps. Reference Susan Snedaker, Business Continuity & Disaster Recovery Planning for IT Professionals (2nd Ed.)
GENERATIVE AI MAY BE USED FOR PROOFING/EDITING YOUR WRITING BUT NOT FOR GENERATING YOUR ANSWER.
Situational Analysis (1 page):
Briefly describe the potential impacts on the company’s operations highlighting the primary risk factors.
Business Impact Analysis (BIA) Summary (1-2 pages) Reference Chapter 5
Provide a concise overview of the critical business functions identified through BIA, their dependencies, and potential losses during the disaster.
Risk Assessment and Mitigation Strategies (1-2 pages) Reference Chapters 4 and 6
Discuss the primary risks identified and their potential impact on critical functions from the BIA, and propose mitigation strategies. (Note: This can be approached from the pre-event perspective – i.e. what could have been done before the event as well as what can be done now that the event has taken place?)
Business Continuity and Recovery Plan (3-4 pages) Reference Chapters 7 and 8
Develop a streamlined plan focusing on critical functions identified in the BAI, including activation, recovery, and emergency response.
Implementation, Testing, and Training (1-2 pages) Reference Chapter 9
Outline a brief strategy for plan implementation, testing methods, and a basic training program for employees.
Delivery:
Prepare a concise report with sections corresponding to numbered items above. Use bullet points, tables or diagrams where possible to convey information more efficiently.
